PT-2020-13618 · Mitel · Mitel Mivoice 6800+1

Matthew Byrdwell · Published 2020-08-26 · Updated 2020-09-01 · CVE-2020-13617

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mitel MiVoice 6800 and 6900 series SIP Phones versions prior to 5.1.0.SP5

Description The issue is related to improper memory handling during failed login attempts in the Web UI component, which could allow an unauthenticated attacker to expose sensitive information.

Recommendations For versions prior to 5.1.0.SP5, update the firmware to version 5.1.0.SP5 or later to resolve the issue.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2020-13617

Affected Products

Mitel Mivoice 6800

Mitel Mivoice 6900

References · 4

• https://osv.dev/vulnerability/CVE-2020-13617 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-13617 · Security Note
• https://mitel.com/support/security-advisories · Vendor Advisory
• https://mitel.com/support/security-advisories/mitel-product-security-advisory-20-0007 · Vendor Advisory